This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer File: 2pxnKeHomJmE3YAtGpDonOL-Nzw.cer (raw, json) Hash identifier: J5aLyszrCej7yGYCZZNNQBBhvyfSaFofuDqaKRc8l4U= Subject key identifier: DA:9C:67:29:E1:E8:98:99:84:DD:80:2D:1A:90:E8:9C:E2:FE:37:3C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA407D7E4201A502717F2E24E688A15 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35280 AS: 43767 IP: 5.182.212.0/22 IP: 84.54.60.0/22 IP: 185.56.152.0/22 IP: 185.94.140.0/22 IP: 185.160.8.0/22 IP: 193.16.213.0/24 IP: 193.16.221.0/24 IP: 193.16.236.0/24 IP: 193.16.239.0/24 IP: 2a02:53a0::/32 IP: 2a05:f440::/29 IP: 2a07:b7c0::/29 IP: 2a09:4b00::/32 IP: 2a0e:3000::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:07:d7:e4:20:1a:50:27:17:f2:e2:4e:68:8a:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da9c6729e1e8989984dd802d1a90e89ce2fe373c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:69:34:a2:03:59:74:b7:19:a3:25:c6:07:61: 99:0c:69:cb:fd:2e:1a:30:70:f4:df:f0:98:c1:93: cf:5b:97:9a:66:39:f2:ce:15:5c:ea:6a:23:1a:da: 4f:07:0f:ca:80:e1:56:ec:78:0f:11:d0:ee:c2:47: 78:d6:46:88:44:27:a2:13:13:a3:e9:e0:3f:41:25: ce:1e:9e:a6:d4:95:10:39:f4:a0:71:49:9c:aa:aa: 0e:2c:cd:06:63:45:9b:31:17:20:60:89:c3:11:09: 4d:91:1a:ae:2e:da:ec:18:7c:49:ff:4f:03:30:6b: 87:c1:3e:e0:02:eb:74:05:54:73:5c:df:3e:13:17: f1:c7:78:c9:d1:3e:5a:fa:47:5f:02:77:9c:81:55: bc:ba:b9:01:36:da:78:84:b9:ba:9f:8e:22:5f:28: 67:40:04:d4:27:68:d3:77:6d:8f:48:15:e2:d6:c5: 44:0d:05:00:23:00:09:c3:c2:7d:dc:23:21:4b:8c: 7f:83:00:24:8b:d8:49:58:55:33:ca:57:60:95:f7: 3e:33:a0:f1:60:9b:19:eb:4e:88:da:3d:29:8d:4f: 88:24:21:d9:a0:95:77:7a:f4:88:44:7a:62:9e:f1: aa:62:c6:59:0c:6a:7d:67:2f:54:ef:a7:bd:14:8d: 49:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:9C:67:29:E1:E8:98:99:84:DD:80:2D:1A:90:E8:9C:E2:FE:37:3C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.212.0/22 84.54.60.0/22 185.56.152.0/22 185.94.140.0/22 185.160.8.0/22 193.16.213.0/24 193.16.221.0/24 193.16.236.0/24 193.16.239.0/24 IPv6: 2a02:53a0::/32 2a05:f440::/29 2a07:b7c0::/29 2a09:4b00::/32 2a0e:3000::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35280 43767 Signature Algorithm: sha256WithRSAEncryption 4d:5d:cc:00:eb:25:68:28:12:d8:2b:ba:83:c7:f7:42:4e:08: db:e8:28:0b:3b:58:44:a9:2a:95:d9:2a:84:2d:b4:1e:89:eb: ae:cb:3c:d3:e7:a5:14:11:44:2b:35:e4:98:fb:01:24:38:7a: c2:12:a3:ca:28:30:50:fb:09:3c:db:6b:66:03:2f:a3:22:0a: 9d:00:f2:44:b8:b0:9b:b1:e6:21:14:fd:85:ef:32:4c:09:11: 2c:51:02:16:d6:5e:54:fb:19:ff:1c:e7:92:d2:4d:11:fb:af: b4:17:bf:52:29:e7:6a:f5:b5:31:83:e8:b0:ae:33:b7:b8:c1: e4:9f:c5:ce:a3:50:b0:4b:89:34:c2:3b:3b:d8:95:0a:fe:35: 71:df:56:0b:6f:80:d6:ca:77:51:a0:8b:17:3a:e5:80:0b:50: 54:50:bc:4c:df:5f:63:b7:5e:dd:2d:2b:4f:cd:84:5c:fb:e1: b7:74:f1:e3:65:95:ef:4b:92:78:c3:28:d2:26:42:c0:80:33: bc:c1:c7:4d:91:e6:41:46:28:36:ba:11:33:f0:e8:9d:b5:8a: 2c:ea:f9:18:39:38:31:a6:86:32:19:78:b2:a7:15:b4:ee:d1: d5:8a:58:e8:8d:dd:57:90:6a:15:df:6d:66:a1:9a:b3:af:28: 57:f2:9d:2d -----BEGIN CERTIFICATE----- MIIF9DCCBNygAwIBAgISAZt7pAfX5CAaUCcX8uJOaIoVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTljNjcyOWUxZTg5ODk5ODRkZDgwMmQxYTkwZTg5Y2UyZmUzNzNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWk0ogNZdLcZoyXGB2GZDGnL/S4a MHD03/CYwZPPW5eaZjnyzhVc6mojGtpPBw/KgOFW7HgPEdDuwkd41kaIRCeiExOj 6eA/QSXOHp6m1JUQOfSgcUmcqqoOLM0GY0WbMRcgYInDEQlNkRquLtrsGHxJ/08D MGuHwT7gAut0BVRzXN8+Exfxx3jJ0T5a+kdfAnecgVW8urkBNtp4hLm6n44iXyhn QATUJ2jTd22PSBXi1sVEDQUAIwAJw8J93CMhS4x/gwAki9hJWFUzyldglfc+M6Dx YJsZ606I2j0pjU+IJCHZoJV3evSIRHpinvGqYsZZDGp9Zy9U76e9FI1JkwIDAQAB o4IDADCCAvwwHQYDVR0OBBYEFNqcZynh6JiZhN2ALRqQ6Jzi/jc8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI4Lzc1NWM1 NS1jNGY1LTRjYjctODcxZC02OWM2OGUyZWYyN2QvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjgvNzU1YzU1 LWM0ZjUtNGNiNy04NzFkLTY5YzY4ZTJlZjI3ZC8xLzJweG5LZUhvbUptRTNZQXRH cERvbk9MLU56dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHoGCCsGAQUF BwEHAQH/BGswaTA8BAIAATA2AwQCBbbUAwQCVDY8AwQCuTiYAwQCuV6MAwQCuaAI AwQAwRDVAwQAwRDdAwQAwRDsAwQAwRDvMCkEAgACMCMDBQAqAlOgAwUDKgX0QAMF AyoHt8ADBQAqCUsAAwUDKg4wADAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMAidAC AwCq9zANBgkqhkiG9w0BAQsFAAOCAQEATV3MAOslaCgS2Cu6g8f3Qk4I2+goCztY RKkqldkqhC20Honrrss80+elFBFEKzXkmPsBJDh6whKjyigwUPsJPNtrZgMvoyIK nQDyRLiwm7HmIRT9he8yTAkRLFECFtZeVPsZ/xznktJNEfuvtBe/UinnavW1MYPo sK4zt7jB5J/FzqNQsEuJNMI7O9iVCv41cd9WC2+A1sp3UaCLFzrlgAtQVFC8TN9f Y7de3S0rT82EXPvht3Tx42WV70uSeMMo0iZCwIAzvMHHTZHmQUYoNroRM/DonbWK LOr5GDk4MaaGMhl4sqcVtO7R1YpY6I3dV5BqFd9tZqGas68oV/KdLQ== -----END CERTIFICATE-----Generated at Tue Jan 20 09:41:17 2026 by rpki-client